On Tue, Feb 12, 2019 at 5:24 AM Tzu-ping Chung <uranu...@gmail.com> wrote:

> One way to avoid disclosing user environments to a third party is to build
> this into PyPI instead. The API could generate the warning for pip to
> display.
>

How large are these kinds of databases? Would it be a conceivable thought
end users and/or CI infrastructures of organisations keep and update their
local copies and thus only disclose the fact they're using such a database?

-- Joni Orponen
--
Distutils-SIG mailing list -- distutils-sig@python.org
To unsubscribe send an email to distutils-sig-le...@python.org
https://mail.python.org/mailman3/lists/distutils-sig.python.org/
Message archived at 
https://mail.python.org/archives/list/distutils-sig@python.org/message/ERBNV6DJ5MTXF5KOHXZDABPQAEUJELMF/

Reply via email to